CVE-2018-10620: Buffer Overflow
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10620?
The severity of CVE-2018-10620 is critical with a score of 9.8.
What software versions are affected by CVE-2018-10620?
AVEVA InduSoft Web Studio versions 8.1 and 8.1 SP1, as well as InTouch Machine Edition versions 2017 8.1 and 2017 8.1 SP1 are affected.
How can a remote user exploit CVE-2018-10620?
A remote user can exploit CVE-2018-10620 by sending a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write.
What are the potential actions that can trigger the vulnerability in CVE-2018-10620?
The vulnerability in CVE-2018-10620 can be triggered during tag, alarm, or event related actions such as read and write.
Are there any fixes or patches available for CVE-2018-10620?
To fix CVE-2018-10620, it is recommended to refer to the security bulletin provided by AVEVA for the necessary updates.